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Abstract 

In this note, we fill a gap in the proof of the heuristic GCD in the 
multivariate case made by Char, Geddes and Gonnet (jlj) and give some 
additionnal information on this method. 



1 Context 

The heuristic gcd algorithm is used to computed the gcd of two polynomials 
P and Q with integer coefficients in one or a few variables : the main idea is 
to evaluate one of the variable Xk at a sufficient large integer z, compute the 
gcd of the evaluations recursively or as integers and reconstruct a candidate gcd 
from the gcd of the evaluations using the representation of coefficients in basis 
z with symmetric representation. It was introduced 15 years ago and is used 
intensively in popular CAS like Maple or MuPAD, see || for more details on 
the efficiency of this algorithm. 

The proof given in the paper of Char, Geddes and Gonnet is correct in one 
dimension but is wrong in the multivariate case. Indeed, in the proof of lemma 

2 (p. 37), the authors applies the univariate case demonstration to a polynomial 
they call PW at a point a that fullfills the hypothesis (6) of lemma 2 for the 
polynomial P, but they don't check that a fullfills this hypothesis (6) for the 
polynomial PW. And there is no reason for a to fullfill it since P' 1 ' is obtained 
by evaluation of all but one variable at integers that sometimes must be non- 
zero or might even be very large (the keypoint for the evaluation point of the 
other variables is that the main coefficient of P with respect to the Xk variable 
does not evaluate to zero which implies that the main coefficient of Q also does 
not evaluate to zero) . Correcting the lemma with the same proof would require 
for example that hypothesis (6) would be replaced by : 

\a\ > 1 + |P«| 

where P*- 1 -* can be any evaluation of P for the variables Xj ^= Xk at integers so 
that the degree of P^ is the same as the degree of P with respect to Xk- This 
has three problems : 
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• it can increase the size of a (which will reduce the efficiency of the algo- 
rithm) 

• it requires an additional step of evaluation of a polynomial at non-zero 
values. 

• it would require fixing the code in CAS using it 

Fortunately, we will give an alternative proof of the correctness of the al- 
gorithm as it is implemented in most CAS, extend the ring to the Gaussian 
integers, and give another lower bound for the evaluation point that insures we 
get the gcd (this lower bound has probably only a theoretical interest) 

Theorem 1 Let P and Q be two polynomials depending on the variables X\, . . . ., Xk, 
with integer coefficients or with Gaussian integer coefficients. We use the nota- 
tion : 

P{z) :=P{X U ... .,X k - U z) 

Let z be any integer such that \z\ > 2 * min(|P|, \Q\) + 2, where \P\ denotes the 
largest norm of all the coefficients of P. Assume that the primitive part G of 
the z-adic symmetric reconstruction of gcd(P(z), Q(z)) divides both P and Q. 

Then G is the gcd of P and Q. The assumption that G divides P and Q is 
always true for z sufficiently large. 

2 Proof of theorem 1. 

Let g — gcd(P(z), Q(z)). From the definition of G, if a is the integer content of 
the z-adic symmetric reconstruction of g 7 we have : 

g = aG(z),\a\<Y (1) 

If D is the polynomial gcd of P and Q, then D(z) divides both P(z) and Q(z), 
therefore 

g = (3D(z),f3€Z[X 1 ,... ) X k _ 1 ] (2) 

If G divides P and Q, G divides D, hence there exists a polynomial C such 
that : 

D = CG=> D{z) = C(z)G(z) (3) 
Combining (Q), @ and (j|), we get : 

aG(z) = f3C{z)G{z) (4) 
We want to prove that C is a constant polynomial. We have the relation 

a = (3C{z) where /3eZ,|a| < M (5) 
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Therefore C(z) does not depend on the variables X\,... .,Xk-i- More precisely, 
there is a polynomial C with integer coefhcients such that : 



C = C(z) + (X k - z)C 



(6) 



We want to prove that C is zero. Assume that C ^ 0. 

We begin by showing that C can not depend on X±, . . . .,Xk~i (this is 
the new multivariate step). Indeed, if C has degree d\ ^ with respect to 
X\ for example, then the highest degree term of C with respect to X\ is 
ci(X 2 , ■ ■ ■ .jX^X^, hence the highest degree term of C with respect to X\ is 
(Xk — z)aXi 1 . Since C divides both P and Q, this highest degree term (Xk — 
z)c\Xi 1 divides the highest degree term piXf FA of P and qiX^' 1 of Q with 
respect to X\. Therefore Xk — z divides pi(X^, ... .,Xk) and qx(Xz, ... .,Xk). 
Now we look at the lowest non-zero degree term of p\ and q\ with respect to Xk'. 
these polynomials of the variables X 2l . . . ., Xk-i arc divisible by z. Since they 
are not zero, we conclude that at least one non-zero coefficient of P and Q is 
divisible by z . This is a contradiction to the hypothesis \z\ > 2 * min( \P\, \ Q |) +2. 

We are now reduced to prove the unidimensionnal case since C depends only 
on the variable Xk and the proof of the original article applies, for the sake of 
completness, let us recall briefly this proof (see also for a proof in dimension 
1). The idea is to factor C over C : 



Since C divides P, C(Xk) divides P(0, . . . .,0, Xk), therefore the roots Zj of C 
are also roots of P(0, . . . .,0,Xk). Same for Q. Therefore, there exists a subset 
of coefhcients of P or of Q, therefore bounded by min(|P|, \Q\), such that 



degree(C) 



C(X k ) = c k [] (X k - Zj ) 



(7) 



m 




(8) 



1=0 



It is well known that (ra) implies : 




(9) 



Indeed, if \x\ < 1, (|^) is trivial (because A = implies x = 0). Otherwise : 



m — 1 m—\ 




,m 



\ = \-j2 a ^\< A T,\ x \ l = A 



i=0 i=0 



therefore, since |x| — 1 > : 



\a m \\x\ m (\x\ - 1) < A\x\ m < A\x\ 



m 



which implies 



® 
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Now equation (Q) gives the bound \zj\ < \z\/2 for all j. Applying this bound 
to (g), we get : 

degree(C) . x degree(c) 

\c(z)\>\ Ck \ n (N-i^D> 

i=i 

which contradicts (||). This ends the proof that G is the gcd of P and Q. 

Note that during the whole proof, we can replace the coefficient ring 1 by 
1[i] without any changes : the gcdheu algorithm works if the coefficients are 
Gaussian integers. 

We finish by giving a theoretical lower bound on z such that G will always 
divide P and Q. This bound will involve the extended gcd algorithm (Bzout 
identity) on P and Q. Let us assume first than we are in dimension f . Since 
gcd(P, Q) = D, there exists an integer 7 and polynomials U and V with integer 
coefficients such that : 

PU + QV = jD (fO) 

At the point z, we get that jD(z) is in the ideal < P(z), Q(z) >=< g >, hence 
g divides 'yD(z). We already know from ([|) that g = /3D(z) where (3 is an 
integer in the univariate case. Therefore (3 divides 7. Now assume that 

|z|>2|£>|| 7 | (ff) 

where the lower bound depends only of the original polynomials P and Q. 
If this assumption is fullfilled, then \z\ > 2\D\\/3\ and the symmetric z-adic 
representation of g = (3D(z) is the polynomial (3D. The primitive part of (3D is 
D, hence G = D. In dimension greater than one, trying to apply the same idea 
will work but with a small modification. Indeed (3 and 7 are now polynomials 
of the variables X\, ...,Xk-\. To conclude, we have two choices : 

• we accept a denominator depending on X%, .., Xk—i during the division 
test of P and Q by G. In this case, the lower bound ( |Tf| ) on \z\ should be 
2 1 D I times the Landau-Mignotte bound on coefficients of the factors of P 
and Q, 

• we remove the gcd of the coefficients of P and Q viewed as polynomials 
in Xk with coefficients in Z[Xi, Xk-il. Then (3 is an integer dividing 



the polynomial 7 and the lower bound (11) is correct 



References 

[1] B. Char, K. Geddes, and G. Gonnet. Gcdheu: Heuristic polynomial gcd 
algorithm based on integer gcd computation. Journal of Symbolic Compu- 
tation, 7:31-48, 1989. 



4 



[2] G. Gonnet. Heuristic algorithms 

'www. inf . ethz . ch/personal/gonnet/CAII/HeuristicAlgorithms/nodel .html, 
1999. 

[3] H.-C. P. Liao and R. J. Fateman. Evaluation of the heuristic polynomial 
GCD. In ISSAC, pages 240-247, 1995. 



5 



